CVE-2008-5406

Stack-based buffer overflow in Apple QuickTime Player 7.5.5 and iTunes 8.0.2.20 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a MOV file with "long arguments," related to an "off by one overflow."

Link	Resource
http://www.securityfocus.com/bid/32540
http://securityreason.com/securityalert/4704
https://exchange.xforce.ibmcloud.com/vulnerabilities/46984
https://www.exploit-db.com/exploits/7296

Configuration 1

cpe:2.3:a:apple:itunes:8.0.2.20:*:*:*:*:*:*:* cpe:2.3:a:apple:quicktime:7.5.5:*:*:*:*:*:*:*

---

Published : 2008-12-10 06:44

Updated : 2017-09-29 01:32

---

NVD link : CVE-2008-5406

Mitre link : CVE-2008-5406

No products.

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer